Malicious
Malicious

b84c3476c63b2caac2016f171a0ade4c

Share on LinkedIn Add to favorites
Re-Scan
Delete
VBScript
MD5: b84c3476c63b2caac2016f171a0ade4c
Size: 1.36 MB
text/vbscript
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
b84c3476c63b2caac2016f171a0ade4c
Sha1
105153fbb6c35f6ffe8e669574be5493432d6d31
Sha256
92928ebfaff7dc919ec783798b7b107e9d97de105c2cf6a981a60e01461efb39
Sha384
569caca7d658ab495930bf5387207da1dac320e93f2b9232e90d1f07d8fba048c248d97f41f20283527530b61f62dd03
Sha512
0762e5605296ec4d9a82d089b9556734abd6b9e0eceed766e9b03a37de12e752f70b76e5022423ca044d0cb311aa9b6679a0a4125bacec268389a5a57945bfb9
SSDeep
384:+BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBv:K7
TLSH
3B554B4622D07BAC6D47E3C83AF0C6C3C9EE795B706C7C43E76A1FD0539970A6A50A19
File Structure
b84c3476c63b2caac2016f171a0ade4c
Malicious
b84c3476c63b2caac2016f171a0ade4c.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:defenestration"
Deobfuscated PowerShell

Invoke-Expression $env:defenestration
Deobfuscated PowerShell

Invoke-Expression $env:defenestration
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:defenestration"
b84c3476c63b2caac2016f171a0ade4c (1.36 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙